diff options
| -rw-r--r-- | notes | 4 | ||||
| -rw-r--r-- | pi.ovpn | 175 |
2 files changed, 178 insertions, 1 deletions
@@ -19,4 +19,6 @@ push "dhcp-option DNS 8.8.4.4" to -push "redirect-private"
\ No newline at end of file +push "redirect-private" + +nb openvpn-install.sh @@ -0,0 +1,175 @@ +client +dev tun +proto udp +sndbuf 0 +rcvbuf 0 +remote 35.161.24.168 1194 +resolv-retry infinite +nobind +persist-key +persist-tun +remote-cert-tls server +cipher AES-256-CBC +comp-lzo +setenv opt block-outside-dns +key-direction 1 +verb 3 +<ca> +-----BEGIN CERTIFICATE----- +MIIDKzCCAhOgAwIBAgIJAJR2J5RjdZq0MA0GCSqGSIb3DQEBCwUAMBMxETAPBgNV +BAMMCENoYW5nZU1lMB4XDTE3MDMyNjIwMzM1NFoXDTI3MDMyNDIwMzM1NFowEzER +MA8GA1UEAwwIQ2hhbmdlTWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB +AQDaBJnoa09asRIiuJ+t9EPOCl4Ozi58SLofhoWS0jcpn+DsswWUT+gXGNrbTPxl +mBtPxg+MijRglJcOFabDI9mY54/MwJSpCKy6hkfaPPEbpppZJX78WoQ1t3E7JNno +yK+nGiv6uBNeuewKgAjdDs/0ZWXoIG83g0Jaj0y2lqr3QkLHbMScS0E/YAv/LQlc +h/6qF4iTTvFMERwpIbKTipkHr8xCd8KU3ndSiH2sJm+i3Etlf1HyldFPfPxN+T9d +c2EIXUTNJAayt59F5uX+qXIckurs4ToVb3vFxoB1tFCmEv36k8dZrYIMhi+l9YtV +2m45ChsbLBJErPZQCVtJpQh/AgMBAAGjgYEwfzAdBgNVHQ4EFgQUDrXASvHdhubG +tdVGSVX96k47ig0wQwYDVR0jBDwwOoAUDrXASvHdhubGtdVGSVX96k47ig2hF6QV +MBMxETAPBgNVBAMMCENoYW5nZU1lggkAlHYnlGN1mrQwDAYDVR0TBAUwAwEB/zAL +BgNVHQ8EBAMCAQYwDQYJKoZIhvcNAQELBQADggEBABJOKDBSl4bxiYa7Dh5BBQbg +1mshBAdZZrArMVD7vVv0bD/fnHGB6osNnCHCgiZY/z3dl2XC2Q/ME+SNMhlaCEWE +hYBFSa1zPHzVLOibIrffYeSpTU+EIazSYvMni1yYmXt2kY+0/gHZNV9nxJryx9J/ +vpvlivE8HbxBoG/HfSUD1fOBcNp7hDqE5/EZ/2QZ2TqyRU8ShFEeL8MaCrtpapvE +gMvE1Ck5mySUoUjiIrPoAIBKvUgUUrnfzZM737j4BqseikclDfwS05pyXuUB24Fv +LRSczjBj1u0ZlGQeqDbwN0R6F/j91KJZop3YYelHOVtxyxXDjg+tv1ojDXvTTJc= +-----END CERTIFICATE----- +</ca> +<cert> +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 4 (0x4) + Signature Algorithm: sha256WithRSAEncryption + Issuer: CN=ChangeMe + Validity + Not Before: Feb 13 20:47:27 2018 GMT + Not After : Feb 11 20:47:27 2028 GMT + Subject: CN=pi + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + Public-Key: (2048 bit) + Modulus: + 00:b9:ba:e4:77:6c:ab:fe:33:b1:5c:a8:5f:d9:61: + 62:a8:c6:8b:6e:a6:a8:13:05:ee:0e:1a:f7:57:3c: + e0:78:d3:ce:27:66:55:61:d9:a2:c3:d5:8c:8d:d6: + c1:12:4e:56:7e:4b:33:0a:b4:82:d3:62:eb:1f:40: + 86:24:f0:3b:2e:ec:13:e2:76:6d:fe:06:68:62:02: + 4f:d6:6f:6f:49:e7:31:6c:2b:1e:3c:18:40:2b:4c: + f3:d0:51:57:ee:18:7a:51:76:b9:77:ea:2f:c0:55: + c4:d3:f9:fd:e7:51:bc:26:3e:de:ec:60:71:34:0d: + 43:ce:9e:e0:85:00:e4:a3:03:41:8d:de:91:8d:f5: + 7c:ed:84:b1:0c:5d:08:cb:d2:30:6e:f6:c0:d6:32: + 6d:2c:8a:42:2f:6a:7f:94:ed:7b:c0:7b:db:01:b8: + af:80:a0:a9:33:2d:62:7c:9b:47:86:a8:8e:22:2f: + 4a:2d:f1:4c:8a:e5:50:cd:17:ca:6a:37:2f:ef:46: + 42:fa:d5:0f:35:06:ad:89:d8:9a:f8:12:6d:76:6c: + 3a:64:03:6d:ab:1b:4b:67:a2:a0:fc:e8:9e:bf:9b: + 51:d1:63:c9:c8:d3:c6:09:3c:16:fc:28:7e:d7:14: + 22:a4:fb:e6:b8:4e:bc:35:70:88:ed:03:17:b1:e9: + bf:49 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + X509v3 Subject Key Identifier: + BF:73:F3:08:01:5C:FE:3A:67:5E:55:C5:C5:6D:CE:D7:08:E5:C3:26 + X509v3 Authority Key Identifier: + keyid:0E:B5:C0:4A:F1:DD:86:E6:C6:B5:D5:46:49:55:FD:EA:4E:3B:8A:0D + DirName:/CN=ChangeMe + serial:94:76:27:94:63:75:9A:B4 + + X509v3 Extended Key Usage: + TLS Web Client Authentication + X509v3 Key Usage: + Digital Signature + Signature Algorithm: sha256WithRSAEncryption + bc:d4:6a:1f:25:ff:0b:68:e9:37:3d:54:f5:2f:b9:fb:8c:84: + d4:99:e6:2d:4d:a2:76:db:2e:f6:dc:d8:3d:76:a8:d9:af:2e: + 27:6d:6b:d5:3a:e7:15:f8:65:ab:fb:34:25:54:3c:7c:20:bc: + 8e:1b:78:b3:94:bd:39:f2:bd:75:95:03:6d:ec:3f:35:6d:ac: + 19:45:3d:86:1e:73:3e:da:cf:82:df:43:7f:02:89:7e:52:96: + 80:4f:96:3f:8e:6b:78:bb:b6:8a:a7:07:1a:67:61:f0:17:a5: + 5c:32:c9:5f:b0:cf:4f:95:cf:24:d2:6d:f9:b8:1d:9c:2c:28: + ad:7a:99:ae:13:83:c9:e2:0c:a6:ec:82:86:45:ac:d2:53:ce: + e9:9f:fc:f1:69:ca:38:2a:14:7c:e0:4c:24:63:69:e2:3e:b5: + b0:9c:ee:b2:df:76:68:05:0a:4d:b2:78:92:9b:fa:8a:eb:92: + 99:50:5c:78:8e:ae:a0:16:e1:60:3d:fa:f0:44:3c:81:49:1f: + 0f:91:eb:e7:f1:95:8e:4a:70:fa:0d:9d:80:3c:23:93:13:f0: + 1c:a0:43:19:f0:e1:be:54:3d:e2:69:71:8f:1c:da:c1:30:9b: + 57:64:19:80:70:6d:3f:e5:d8:60:1b:3b:e8:29:05:5a:be:1c: + ba:f6:25:19 +-----BEGIN CERTIFICATE----- +MIIDMDCCAhigAwIBAgIBBDANBgkqhkiG9w0BAQsFADATMREwDwYDVQQDDAhDaGFu +Z2VNZTAeFw0xODAyMTMyMDQ3MjdaFw0yODAyMTEyMDQ3MjdaMA0xCzAJBgNVBAMM +AnBpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubrkd2yr/jOxXKhf +2WFiqMaLbqaoEwXuDhr3VzzgeNPOJ2ZVYdmiw9WMjdbBEk5WfkszCrSC02LrH0CG +JPA7LuwT4nZt/gZoYgJP1m9vSecxbCsePBhAK0zz0FFX7hh6UXa5d+ovwFXE0/n9 +51G8Jj7e7GBxNA1Dzp7ghQDkowNBjd6RjfV87YSxDF0Iy9IwbvbA1jJtLIpCL2p/ +lO17wHvbAbivgKCpMy1ifJtHhqiOIi9KLfFMiuVQzRfKajcv70ZC+tUPNQatidia ++BJtdmw6ZANtqxtLZ6Kg/Oiev5tR0WPJyNPGCTwW/Ch+1xQipPvmuE68NXCI7QMX +sem/SQIDAQABo4GUMIGRMAkGA1UdEwQCMAAwHQYDVR0OBBYEFL9z8wgBXP46Z15V +xcVtztcI5cMmMEMGA1UdIwQ8MDqAFA61wErx3YbmxrXVRklV/epOO4oNoRekFTAT +MREwDwYDVQQDDAhDaGFuZ2VNZYIJAJR2J5RjdZq0MBMGA1UdJQQMMAoGCCsGAQUF +BwMCMAsGA1UdDwQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAQEAvNRqHyX/C2jpNz1U +9S+5+4yE1JnmLU2idtsu9tzYPXao2a8uJ21r1TrnFfhlq/s0JVQ8fCC8jht4s5S9 +OfK9dZUDbew/NW2sGUU9hh5zPtrPgt9DfwKJflKWgE+WP45reLu2iqcHGmdh8Bel +XDLJX7DPT5XPJNJt+bgdnCworXqZrhODyeIMpuyChkWs0lPO6Z/88WnKOCoUfOBM +JGNp4j61sJzust92aAUKTbJ4kpv6iuuSmVBceI6uoBbhYD368EQ8gUkfD5Hr5/GV +jkpw+g2dgDwjkxPwHKBDGfDhvlQ94mlxjxzawTCbV2QZgHBtP+XYYBs76CkFWr4c +uvYlGQ== +-----END CERTIFICATE----- +</cert> +<key> +-----BEGIN PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC5uuR3bKv+M7Fc +qF/ZYWKoxotupqgTBe4OGvdXPOB4084nZlVh2aLD1YyN1sESTlZ+SzMKtILTYusf +QIYk8Dsu7BPidm3+BmhiAk/Wb29J5zFsKx48GEArTPPQUVfuGHpRdrl36i/AVcTT ++f3nUbwmPt7sYHE0DUPOnuCFAOSjA0GN3pGN9XzthLEMXQjL0jBu9sDWMm0sikIv +an+U7XvAe9sBuK+AoKkzLWJ8m0eGqI4iL0ot8UyK5VDNF8pqNy/vRkL61Q81Bq2J +2Jr4Em12bDpkA22rG0tnoqD86J6/m1HRY8nI08YJPBb8KH7XFCKk++a4Trw1cIjt +Axex6b9JAgMBAAECggEAQGnR3J1C1SmGZJU8kL6WoeQh7WE9P0O6OQgfKhFB5IXI +pJ94EzSQn4yLb5HAaiHjG2/nJtpN2RQgaTlOjLcIP5C+oLbkFMqSHxOgLsV8+kuF +N3eIx9y9PIc2s9PSRBAXM/OSBUWiA/l7Bu1XoocVUspRM/eKqzvCfYFaaqZRpTrf +gs3TdomhnY7mX4YsMbJBQKDgrZQiyyD+P6EXKo73B/quthmRprkjayIZahalGD8V +WDSRWNLX2zRWIDWESFRBIf8wirE/AyN0NjARLt210wIH60xm8P5cU9J44z1Z43qJ +LMr+C/FMGA8Zk/PZK48N4JLgFXxfQOteHchcW172NQKBgQDiLUhOGA39lMk1Py21 +ckDQ3xnO7vwV1cygGBa5StiZzXWKRP0XcLLpR5Nn2k5+5xGuBbI7g8xdkzJ0jjy8 +L9GsT1HPhJEwhyDFRt6qfyi1dSCgRMejQy6LUm8UfFp+7H9w33jpednkQ1Opfn69 +VTDBzzufGn+nhRVydmaUWeQ2NwKBgQDSOE5hDlave6/2UTSOCyj5zP95aorpc96h +QwwE9iLJNG7XQWMOpgj1uKcG3/nrLhDtbq05OUBrTQatS2sJv0MFbgKue2/yIz5X +btITLMC2kQmFoXFyEI2eQe336Sc+zNpjLVFCjsFitaRKLim81B4toCnxcwa/B4aK +YcTpkjb2fwKBgQCR4gE0FcHYYMJS7Ngvo2z5DB2aYn0IHGmqjT8C7qq8sU/yCkNw +fgl3++mw35cntSSrKRNn3b/QT2QI18GG5BUKXfL3tZrsQQw7ElYGhJQeTljn5tUZ +kfiQdnAdN4QrP6GHjSxw814+I8rvlR5sQml7aI4dNjtGMsm9lW7emwheiwKBgQDK +n80kjc6OLJkpwZH3i9g+FxL0M/abGL0xENAIBDr5VxmzT2osV2txdT9BSCe7QNa+ +FJzQ+FcYVdEmvff5GCqAlE3vYjk/2iqf2ciRBOTn1BqqfDc966ilLwUxnMDgLlId +oDOgBLtv6oblnWNLh+VisutauDV7ccSDo8NKI03o/wKBgFCFFd7fs5RuXSvFXQw9 +MfBLKbHOMMctk/CHIPXf3pGSImmQFdt6JrH76Rq5e6WvPYDttZ3TVLvT+u75yvcR +8Qhui7zETWc8+ajNSvj+sNvdBj2VEW00ErGDP+yVXQIOaR2QjAjzrWA2mKdX+GMR +LlgiAHAjqnj1u1ovElG3Rtzb +-----END PRIVATE KEY----- +</key> +<tls-auth> +# +# 2048 bit OpenVPN static key +# +-----BEGIN OpenVPN Static key V1----- +2fa35e9bc6e7d3b0c6dd1712d7774dee +9bbc3efe46081fcdcdf482da8dd7c5e1 +850d7ead8decab98778a7f0f934450dc +f20750afa23c139200c75f6e24510367 +a57534519ae6c587ae0b468d9841d834 +6839d9205db7df5bed4ac8b44ca16ae2 +273a3811864d7542077efbd82c8947c9 +b7c291e779e4c68eaef93abb33820d29 +d40cfd3cbd5aaa9c7b60609ef0d5354d +cbc7c2929177ea4e159cbc8f37493711 +881ac1657d0e4a04935c64fb086f6dd2 +a50c71e6731b5d263f3fc746a08b0750 +abe35fc65f4a88bd14d2d473f0718410 +20def45b5207e9c41fbc49ffe1d342a4 +abca39e91b0b80abb97fc80e58d34657 +ed4d26a35a04568ddfe600f7f7440f4d +-----END OpenVPN Static key V1----- +</tls-auth> |
